PT-2020-16054 · Phpgurukul · Phpgurukul Hospital-Management-System-In-Php

Name of the Vulnerable Software and Affected Versions: PHPGurukul hospital-management-system-in-php version 4.0 Description: The issue allows for XSS attacks via several endpoints, including "admin/patient-search.php", "doctor/search.php", "book-appointment.php", "doctor/appointment-history.php",...

PT-2020-16053 · Phpgurukul · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul hostel-management-system version 2.1 Description: The issue allows for XSS attacks through various input fields, including Guardian Name, Guardian Relation, Guardian Contact no, Address, or City. Recommendations: For PHPGurukul...

CVE-2020-25487

PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php...

Sql injection

PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php...

CVE-2020-25487

The CVE-2020-25487 affects PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 . The vulnerability is an SQL Injection delivered via the endpoint zms/animal-detail.php , enabling manipulation of database queries. The source indicates the issue is tied to this endpoint; there is no av...

CVE-2020-25487

PHPGURUKUL Zoo Management System Using PHP and MySQL version 1.0 is affected by: SQL Injection via zms/animal-detail.php...

CVE-2020-23936

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...

CVE-2020-23936

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...

CVE-2020-23936

CVE-2020-23936 affects PHPGurukul Vehicle Parking Management System 1.0. Affected component: login/authentication; root cause described in connected PT-2020-15602 as an authentication bypass obtainable by using Username: admin'# and any Password. No other technical details on the underlying flaw ...

CVE-2020-23936

PHPGurukul Vehicle Parking Management System 1.0 is vulnerable to Authentication Bypass via "Username: admin' && Password: Write Something"...

Directory Management System (DMS) 1.0 SQL Injection Vulnerability

Directory Management System DMS version 1.0 suffers from multiple remote SQL Injection vulnerabilities, one of which allows for authentication bypass. Exploit Title: Directory Management System DMS 1.0 - Authentication Bypass Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 |...

Employee Record Management System 1.1 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Employee Record Management SystemERMS 1.1 - Authentication Bypass Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

Client Management System 1.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Client Management System 1.0 - 'searchdata' SQL Injection Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage:...

Online Shopping Portal 3.1 - 'email' SQL Injection

Exploit Title: Online Shopping Portal 3.1 - 'email' SQL Injection Date: 2020-07-06 Exploit Author: gh1mau Team Members: Capt'N,muzzo,chaos689 | https://h0fclanmalaysia.wordpress.com/ Vendor Homepage: https://phpgurukul.com/shopping-portal-free-download/ Software Link:...

Hostel Management System 2.0 - 'id' SQL Injection (Unauthenticated)

Exploit Title: Hostel Management System 2.0 - 'id' SQL Injection Unauthenticated Date: 2020-06-02 Exploit Author: Selim Enes 'Enesdex' Karaduman Vendor Homepage: https://phpgurukul.com/hostel-management-system/ Software Link: https://phpgurukul.com/?smdprocessdownload=1&downloadid=7210 Version: 2...

Online Marriage Registration System 1.0 - Remote Code Execution Vulnerability

Exploit for php platform in category web applications Exploit Title: Online Marriage Registration System 1.0 Remote Code Execution Exploit Author: Selim Enes 'Enesdex' Karaduman Vendor Homepage: https://phpgurukul.com/ Software Link:...

Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting

Exploit Title: Online Marriage Registration System 1.0 - Persistent Cross-Site Scripting Google Dork: N/A Date: 2020-05-26 Exploit Author: that faceless coderInveteck Global Vendor Homepage: https://phpgurukul.com/ Software Link:...

File Upload Vulnerability in Phpgurukul Complaint Management System in PHP

Phpgurukul Complaint Management System in PHP is a PHP project that can be used to request complaints through an online service. A file upload vulnerability exists in Phpgurukul Complaint Management System in PHP, which can be exploited by an attacker to upload malicious files and gain...

Logic Flaw Vulnerability in Phpgurukul Hospital Management System in PHP

PHPGurukul Hospital Management System in PHP is a web application for hospitals to manage doctors and patients. A logic flaw vulnerability exists in Phpgurukul Hospital Management System in PHP, which can be exploited by an attacker to bypass normal user login and gain unauthorized access to the...

Logic Flaw Vulnerability in Phpgurukul Complaint Management System in PHP

Phpgurukul Complaint Management System in PHP is a PHP project that can be used to request complaints through an online service. A logic flaw vulnerability exists in Phpgurukul Complaint Management System in PHP, which can be exploited by an attacker to bypass normal user login and gain...